$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/47e32468-0623-350d-b958-a43526f12e4c.roa File: 47e32468-0623-350d-b958-a43526f12e4c.roa (raw, json) Hash identifier: mAYxnlN0G8DtpcxZFVb9zm9O8kLQv6gtfFSL8/dbZ2g= Subject key identifier: 23:03:BC:CB:E1:20:56:6A:50:FB:47:8D:6C:90:10:6B:16:7E:AE:27 Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Certificate serial: 010D0C9F43285849DF5A654715EE028A5C48BB80 Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/47e32468-0623-350d-b958-a43526f12e4c.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 6315 IP address blocks: 207.135.128.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:65:47:15:ee:02:8a:5c:48:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=e73971f2-ab0c-4221-acfc-07db8c082aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bf:ea:e4:4b:b9:1c:90:8f:94:0a:b8:53:d9: b0:20:4c:4c:b1:a9:8c:c8:0a:80:4f:99:b3:ca:3a: 20:c4:8f:08:d5:04:f0:31:65:71:90:88:96:4f:2b: 5b:e1:3f:57:ea:2c:26:17:a9:ae:cd:d3:aa:af:cd: a0:c7:d4:36:8c:af:9f:57:4d:33:11:4d:7c:61:55: 2c:52:b3:15:14:e5:05:fa:93:c3:61:f5:4a:3f:02: 91:ed:84:e9:0d:de:f5:e5:7d:e4:01:31:17:d0:b2: d7:6a:98:35:d3:32:58:a0:dd:31:83:c1:ba:c8:0c: 25:77:22:86:50:1d:16:55:a5:39:a1:c7:83:21:42: 1a:34:b2:50:2a:af:7e:85:29:81:db:d8:d5:f1:b3: d2:53:28:89:3c:c2:55:77:0f:3f:1e:88:39:99:06: d5:1c:0e:72:ca:2e:75:c8:b3:27:cd:7d:5a:9c:a2: 40:cd:f9:09:72:c9:b6:d0:5b:09:92:c7:f5:03:0e: 67:14:6f:9a:28:25:e8:b6:5d:c5:cc:37:5a:bf:e0: 5e:3f:53:91:20:70:26:e9:88:3c:23:e1:82:e6:ac: e7:53:7c:84:e8:0a:65:94:22:25:0c:99:9f:2d:16: ff:a6:4b:dc:78:92:80:4c:ff:65:a5:33:2c:87:f0: 98:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:03:BC:CB:E1:20:56:6A:50:FB:47:8D:6C:90:10:6B:16:7E:AE:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/47e32468-0623-350d-b958-a43526f12e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl X509v3 Authority Key Identifier: keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer sbgp-ipAddrBlock: critical IPv4: 207.135.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d4:5b:69:eb:25:6b:e3:b6:78:47:36:cf:40:f2:cd:a2:45: f6:06:be:bd:4b:4b:1f:50:ae:00:3a:7c:59:83:c0:7b:0d:c3: 5d:00:cb:10:95:2b:8f:8c:45:4b:a6:eb:e7:de:9c:34:08:e4: 2c:32:c8:92:68:2a:b3:f2:fa:ab:7d:7f:2e:ff:7b:61:e7:55: 93:f6:76:6a:8e:00:96:5d:ea:81:9a:08:a2:60:f8:d0:ce:e1: 7e:6a:da:5f:f7:c9:15:a5:be:ec:e7:7c:33:0d:0c:da:45:fd: a9:86:6f:fd:66:38:af:fe:eb:7d:01:96:53:30:16:ff:a5:6b: 30:cc:93:0a:43:ec:0d:af:f1:9d:8f:ce:e3:91:59:fa:6f:ef: 9d:87:9a:01:22:7b:6a:d2:b8:a7:08:dc:6c:ca:0b:3a:40:2a: 88:c3:87:7b:b5:64:aa:11:4a:fc:d7:74:9b:b1:1e:28:00:7f: 0a:bd:84:2e:14:70:0a:92:14:a8:a1:0f:58:af:61:c1:da:66: 8e:24:14:9e:4a:2f:c6:df:98:c9:a3:3b:4d:0a:79:fe:e3:ac: 59:6c:4d:2e:e7:bc:d0:54:1a:fb:18:b9:48:de:1b:70:3f:69: ac:ae:58:c1:2a:cf:be:43:eb:05:6f:a3:31:e6:b9:79:26:87: cb:2b:c9:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWmVHFe4CilxIu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZlNzgwNGYtZjE2YS00Zjc4LTk5NzktNmE4ZDUwOTll NWU3MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZTczOTcxZjItYWIwYy00MjIxLWFjZmMtMDdkYjhjMDgyYWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb/q5Eu5HJCPlAq4U9mwIExMsamMyAqAT5mz yjogxI8I1QTwMWVxkIiWTytb4T9X6iwmF6muzdOqr82gx9Q2jK+fV00zEU18YVUs UrMVFOUF+pPDYfVKPwKR7YTpDd715X3kATEX0LLXapg10zJYoN0xg8G6yAwldyKG UB0WVaU5oceDIUIaNLJQKq9+hSmB29jV8bPSUyiJPMJVdw8/Hog5mQbVHA5yyi51 yLMnzX1anKJAzfkJcsm20FsJksf1Aw5nFG+aKCXotl3FzDdav+BeP1ORIHAm6Yg8 I+GC5qznU3yE6ApllCIlDJmfLRb/pkvceJKATP9lpTMsh/CYMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMDvMvhIFZqUPtHjWyQEGsWfq4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3 ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5OWU1ZTcvNDdlMzI0NjgtMDYyMy0z NTBkLWI5NTgtYTQzNTI2ZjEyZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZlNzgwNGYtZjE2YS00Zjc4LTk5 NzktNmE4ZDUwOTllNWU3LzBmZTc4MDRmLWYxNmEtNGY3OC05OTc5LTZhOGQ1MDk5 ZTVlNy5jcmwwHwYDVR0jBBgwFoAU+VXAQ4RRLwbPOrS6kfJqw02k5GgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThk NTA5OWU1ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz4eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvUW2nrJWvjtnhHNs9A8s2iRfYGvr1LSx9QrgA6fFmDwHsNw10AyxCV K4+MRUum6+fenDQI5CwyyJJoKrPy+qt9fy7/e2HnVZP2dmqOAJZd6oGaCKJg+NDO 4X5q2l/3yRWlvuznfDMNDNpF/amGb/1mOK/+630BllMwFv+lazDMkwpD7A2v8Z2P zuORWfpv752HmgEie2rSuKcI3GzKCzpAKojDh3u1ZKoRSvzXdJuxHigAfwq9hC4U cAqSFKihD1ivYcHaZo4kFJ5KL8bfmMmjO00Kef7jrFlsTS7nvNBUGvsYuUjeG3A/ aayuWMEqz75D6wVvozHmuXkmh8sryRM= -----END CERTIFICATE-----Generated at Sun Jun 15 14:56:24 2025 by rpki-client